Vulnerabilities

TI-2008-01964 CVE-2008-2044 · GHSA-fp75-j58g-99xp

includes/library.php in netOffice Dwins 1.3 p2 compares the demoSession variable to the…

MEDIUM 46

includes/library.php in netOffice Dwins 1.3 p2 compares the demoSession variable to the 'true' string literal instead of the true boolean literal, which allows remote attackers to bypass authentication and execute arbitr…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.11352 Published 2008-05-01 No fix listed CWE-94

TI-2006-01448 CVE-2006-1495 · GHSA-3w99-q2jm-p4jj

SQL injection vulnerability in general/sendpassword.php in (1) PHPCollab 2.4 and 2.5.rc3…

MEDIUM 42

SQL injection vulnerability in general/sendpassword.php in (1) PHPCollab 2.4 and 2.5.rc3, and (2) NetOffice 2.5.3-pl1 and 2.6.0b2 allows remote attackers to execute arbitrary SQL commands via the loginForm parameter in t…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.06309 Published 2006-03-30 No fix listed

Vulnerabilities

Filters

includes/library.php in netOffice Dwins 1.3 p2 compares the demoSession variable to the…

SQL injection vulnerability in general/sendpassword.php in (1) PHPCollab 2.4 and 2.5.rc3…